Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/401atTgokyQIJULJNvzmLvBQv-A.roa
File:                     401atTgokyQIJULJNvzmLvBQv-A.roa (raw, json)
Hash identifier:          Q9ebX740TwV7/9TLKfyDPyxcc/DoNbSuuW9yQCVPw2I=
Subject key identifier:   E3:4D:5A:B5:38:28:93:24:08:25:42:C9:36:FC:E6:2E:F0:50:BF:E0
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       026E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/401atTgokyQIJULJNvzmLvBQv-A.roa
Signing time:             Sun 01 Oct 2023 01:29:27 +0000
ROA not before:           Sun 01 Oct 2023 01:29:27 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        106.162.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 622 (0x26e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct  1 01:29:27 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=E34D5AB538289324082542C936FCE62EF050BFE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a6:c4:c0:b4:01:65:39:2d:5a:b8:9c:1e:37:
                    61:01:78:e0:fb:ba:2f:86:21:a6:ac:48:db:15:ed:
                    b0:36:a1:73:79:43:06:9d:89:82:24:f1:b4:73:a8:
                    37:bd:9c:13:93:f0:c2:0c:28:35:e4:f6:65:e6:cd:
                    37:20:76:af:e0:7d:f0:54:67:90:c4:04:8e:ad:d2:
                    37:a4:21:b1:e4:2f:0d:5f:2e:bb:d9:d9:de:24:39:
                    e1:5a:0c:01:56:87:dc:55:80:95:83:cb:be:e0:43:
                    cf:09:59:62:14:02:3d:e0:f9:38:a8:da:a7:2a:b4:
                    4f:af:6f:d7:2d:34:44:a8:e5:52:c4:b6:90:2e:c2:
                    2f:65:78:35:16:62:11:0e:34:c1:32:e3:bd:13:d7:
                    6d:3b:a5:f5:aa:c3:b8:93:23:fe:63:e5:1c:5c:c5:
                    49:09:87:a6:66:56:b6:5c:9c:64:7f:29:f9:4f:81:
                    27:69:23:84:3f:56:af:f8:bd:dd:81:2f:ba:63:49:
                    ac:5d:6d:07:c5:07:83:3e:32:7a:70:84:69:22:64:
                    08:21:10:d4:ac:e8:41:91:a2:ca:40:a4:a6:9f:c7:
                    2e:4d:63:43:c6:69:a0:23:81:b1:6e:b4:37:20:ec:
                    ce:05:f4:33:e7:22:b5:24:27:91:ab:1b:4e:b9:32:
                    40:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4D:5A:B5:38:28:93:24:08:25:42:C9:36:FC:E6:2E:F0:50:BF:E0
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/401atTgokyQIJULJNvzmLvBQv-A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.162.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         00:4d:b3:5c:d5:0c:99:06:ea:01:4e:60:16:8e:01:2e:bb:82:
         34:4f:3d:d4:83:e8:c5:0b:c3:8f:b7:d4:05:c0:2f:6b:a8:fc:
         53:02:7c:bd:1e:ff:77:86:53:89:70:f0:54:9b:ee:59:5a:18:
         4e:8a:14:4e:68:3a:1f:e3:7f:7b:fb:24:8c:f3:4d:ac:64:54:
         85:23:01:c5:9e:28:01:67:94:07:12:64:06:b0:33:a0:24:4e:
         9b:31:a8:53:24:74:a7:da:84:e5:e9:96:ee:a3:eb:1d:a6:0b:
         da:e4:e9:61:02:88:bf:50:37:bf:7f:13:0e:74:e6:cf:7f:f1:
         01:d5:31:b1:99:e9:f2:8b:dc:f8:e9:e0:f9:01:5f:5a:ba:ff:
         32:09:f1:35:2a:19:ea:a0:ff:90:cb:b6:57:15:6d:94:8d:c2:
         c3:fe:d2:4c:72:a3:fb:01:0a:6f:1f:06:a3:56:c2:25:80:a9:
         6a:17:7c:0d:b7:bc:b5:00:94:4c:ce:7e:ad:80:ef:3c:72:33:
         35:92:36:9c:41:a4:df:0e:61:4f:fe:fa:71:b9:00:22:00:9b:
         00:d2:07:3a:ed:30:7f:30:9c:4c:a0:e6:c8:28:94:35:e2:23:
         17:8e:03:5e:04:f9:e7:1e:fb:28:ef:a5:11:30:d1:20:61:c7:
         e5:48:fb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:13 2024 by rpki-client on console-fra.rpki-client.org